Digital Identities in the Internet of Things - Securely Manage Devices at Scale
1 like1,633 views
The document details a webinar discussing the importance of managing digital identities in the Internet of Things (IoT) for both industrial and consumer applications, emphasizing the integration of identity and access management (IAM) capabilities to enhance security and customer experience. Key themes include the necessity of organizational change due to digital transformation, the interconnected nature of systems, and the challenges faced in managing identities across diverse digital environments. The session is led by experts from KuppingerCole and ForgeRock, addressing complex access scenarios and the future of IAM in a connected world.
Digital Identities in the Internet of Things - Securely Manage Devices at Scale
- 1. Digital Identities in the Internet of Things Securely Manage Devices at Scale DATE: Tuesday, September 25, 2018 TIME: 4:00pm CEST, 10:00am EDT, 7:00am PDT www.kuppingercole.com Martin Kuppinger CEO, Founder & Principal Analyst KuppingerCole mk@kuppingercole.com This webinar is supported by Gerhard Zehethofer VP Manufacturing ForgeRock
- 2. • Founded in 2004 • International independent analyst organization • Offers neutral advice, expertise, thought leadership, and practical relevance • Supports companies, corporate users, integrators, and software manufacturers with tactical and strategic challenges • Specialized in: • Information Security • Identity & Access Management (IAM) • Governance (IAG) • Risk Management & Compliance (GRC) • All areas concerning the Digital Transformation About KuppingerCole 2© KuppingerCole
- 3. 3 Our Business Areas • Research on all major & current topics tailored to your needs • Vendor-Neutral • Always current • Independent Advice • Conferences, Webinars & Special Events • Innovative Leadership • Future proof approach • Great Networking Opportunities • Meet the Experts • Best in class and trusted Advisory Partner • Together we make Your Business more successful • Most current advise in the Era of Digital Transformation Research Events Advisory © KuppingerCole
- 4. Upcoming KuppingerCole Events 4 More information at www.kuppingercole.com© KuppingerCole
- 5. 5 You are muted centrally. You don‘t have to mute/unmute yourself – we control the mute/unmute features The Questions and Answers Session will be at the end. You can enter questions anytime, using the Questions feature in the GoToWebinar Control Panel. We will record the Webinar – the podcast recording will be available tomorrow. © KuppingerCole Some Guidelines for the Webinar
- 6. © KuppingerCole 6 Talks about the “why” and the “how” of Identities for IoT, both Industrial IoT and Consumer IoT How ForgeRock is extending IAM capabilities into the areas of managed and unmanaged devices, enhancing the customer experience as well as security and privacy at scale for people, services, and things Part 1 Martin Kuppinger KuppingerCole Part 2 Gerhard Zehethofer ForgeRock Questions and Answers (Q & A)Part 3 Agenda
- 7. 1. The Digital Transformation affects every organization 2. The Digital Transformation is here to stay 3. Digital Transformation is more than just IoT 4. Digital Transformation mandates Organizational Change 5. Everything & Everyone becomes connected 6. Security & Safety: not a dichotomy 7. Security is a risk – and an opportunity 8. Identity is the glue – who or what may get access to what? Eight Fundamentals for the Digital Transformation © KuppingerCole 8
- 8. Smart watches Connected vehicles Smart homes Smart grids eBooks Digital music Online retail Online payment Manufacturing Fundamental #1 The Digital Transformation affects every organization © KuppingerCole 9
- 9. Fundamental #3.1 Digital Transformation is already reality in many industries – without any connected things Fundamental #3.2 Industry 4.0 (or „smart manufacturing“) is about connecting manufacturing environments and this „Operational Technology“ (OT) – quite big things here Fundamental #3.3 Connecting things for the sake of connectivity does not create business – it is the change in business models and the services that make the business Fundamental #3.4 Most (not all) business providing things will earn more with services than with the things Fundamental #3 Digital Transformation is more than just IoT © KuppingerCole 10
- 10. © KuppingerCole 11 Fundamental #5 Everything & Everyone becomes connected The new ABC: Agile Business - Connected
- 11. © KuppingerCole The quintessence of Industry 4.0: Connecting everything = everything is under attack Business Process Established Attack Vectors Manufacturing Process Established, but yet rare Attack Vectors Connecting Processes (Industry 4.0) 12
- 12. © KuppingerCole 13 Fundamental #6 Security & Safety: Not a dichotomy Operational Technology Security •Safety (of humans and equipment) •Reliability •Availability (of technology) Information Technology Security •Confidentiality •Integrity •Availability (of information) People use devices access services control manufacturing Brave new world of smart manufacturing In most scenarios, there will be bi-directional communication A system an attacker can connect to is at risk We have to merge OT and IT security (and „things“ security) It‘s not about safety vs. security, it is about safety and security Rethink OT: Time for SDOT – software-defined OT
- 13. Fundamental #1: More than humans - It’s also about Identities of things, devices, services, and apps Fundamental #2: Multiple Identity Providers - We will not manage all identities internally anymore and trust will vary Fundamental #3: Multiple Attribute Providers - There will no longer be a single source of truth and information on identities anymore Fundamental #4: Multiple Identities - Many users will use different identities (or personas) and flexibly switch between these Fundamental #5: Multiple Authenticators - There is no single authenticator that works for all Fundamental #6: Identity Relationships - We must map humans to things, devices, and apps Fundamental #7: Context - Identity and Access Risk varies in context Fundamental #8 Identity is the glue – access control is what you need © KuppingerCole 14 Seven Fundamentals for Future Identity and Access Management
- 14. Safety •Ensure that neither faults nor failure nor attacks cause damage – revert to fail-safe mode and continue working Security •Ensure that no one can attack the connected thing(s) or set of things Privacy •Ensure compliance with regulations and avoid leakage of PII Identity •Manage all identities of organizations, people, device, and things, and their access to systems, components, and data © KuppingerCole 15 Four of the many challenges of security for IoT
- 15. © KuppingerCole 16 It‘s not only one big thing – IoT can be complex … … … … … … … Sensors Controllers Systems Entities Identities • Not all components are directly addressable, i.e. sensors • Controllers might work unidirectional or bidirectional • There is system-system and system- peripheral system communication • Various entities might access systems that read or write to controllers • Multiple entities might access these systems
- 16. Systems Event data recorder Motor engine controller SCADA device … DataUsage data Event data Individual configuration data State data … Organizations Manufacturer Distributor Insurance company Government … Individuals Employees of organizations Workers Auditors Production worker… Events Standard use Violation of defined limits Accident Technical failure … © KuppingerCole 17 Understand the complexity of access Who is allowed to access which data under which event?
- 17. Who is allowed to access which data under which event? Multiple IAM systems, e.g. employees, customers, partners, suppliers, governmental organizations, insurance companies,… Data exchange to various types of partners such as manufacturer/reseller, manufacturer/insurance companies, manufacturer/governmental organizations,… Data is distributed across multiple controllers and systems Systems in general are best suited for IAM for the IoT There is a need for more than one IAM, because systems are massively segregated (consumer vs. technical control) Security and privacy for data that is shared/exchanged between multiple parties is hard to enforce © KuppingerCole 18 The IAM challenge of IIoT in complex environments
- 18. © KuppingerCole 19 Talks about the “why” and the “how” of Identities for IoT, both Industrial IoT and Consumer IoT How ForgeRock is extending IAM capabilities into the areas of managed and unmanaged devices, enhancing the customer experience as well as security and privacy at scale for people, services, and things Part 1 Martin Kuppinger KuppingerCole Part 2 Gerhard Zehethofer ForgeRock Questions and Answers (Q & A)Part 3 Agenda
- 19. Upcoming KuppingerCole Events 20 More information at www.kuppingercole.com© KuppingerCole
- 20. KuppingerCole GDPR Readiness Assessment 21 © KuppingerCole
- 21. 22 KuppingerCole Core Advisory Areas •A clear understanding of the scope and maturity of defined processes, the implemented systems and the organization. Benchmarking and Optimization •A well thought-out strategy provides clear answers to future questions and thus helps to significantly shorten decision-making processes. Strategy Support •A concise and consistent vision in the development of IT architectures and the selection of technologies, vendors and products. Architecture and Technology Support •Support in the evaluation and management of implementation projects over time. (One-time or scheduled). Project Guidance KuppingerCole Advisory Services Benchmarking and Optimization Strategy Support Architecture and Technology Support Project Guidance © KuppingerCole
- 22. Related Research © KuppingerCole 23 No. Type Title L. 40296 Executive View ForgeRock Identity Platform 71316 Executive View ForgeRock Access Management 70282 Advisory Note Identity in IoT 70999 Advisory Note Connected Enterprise Step-by-step 70998 Advisory Note The new ABC for IT: Agile Businesses, Connected 73000 Whitepaper ForgeRock: The Effect of GDPR on Customer Relations
- 23. KuppingerCole Analysts AG Headquarters Wilhelmstr. 20-22 65185 Wiesbaden | Germany Tel +49 (211) 23 70 77 – 0 Fax +49 (211) 23 70 77 – 11 www.kuppingercole.com The Future of Information Security – Today. info@kuppingercole.com KC2016/10/05 © KuppingerCole